What we collect
From you (the stylist): your name, email, phone, business name, booking page handle, services, hours, and payment information. We hand the card details off to Stripe — we never see your full card number.
From your clients: their name, phone, and email, plus the appointments they book and messages they exchange with you through ChairCal, and the notes and photos you keep about them, which only your account can see. We get this either from you (when you add a client) or from them directly (when they book through your chaircal.com page). A client's profile photo is one of those photos and is shown only in your account; ChairCal offers no way to save or share photos out of it.
Automatically: standard log data when you use the service (IP address, browser type, pages visited). We use this to keep the service running and to debug issues.
How we use it
To run the service: send the texts and emails you tell us to send, show you your schedule, recover your cancellations, charge your subscription. That's it. We do not sell or share (as those terms are defined under the California Consumer Privacy Act) your personal information or your clients' personal information, and we have not done so in the preceding twelve months. We do not share data with advertisers.
Where we operate
ChairCal is intended for stylists and clients in the United States and Canada. We don't market the service to, or knowingly accept signups from, residents of the European Union, the United Kingdom, or other jurisdictions outside the U.S. and Canada. If you live outside our supported regions, please don't use the service.
California residents have additional rights under the California Consumer Privacy Act (CCPA) — including the right to know what we collect, to delete it, and to confirm we don't sell or share it. To exercise any of those rights, email support@chaircal.com.
Who we share it with (service providers)
To run the service, we use a small set of trusted vendors who process data on our behalf:
- Twilio — sends and receives SMS on your behalf.
- Stripe — handles your subscription billing.
- Convex — hosts your data and runs the application backend.
- Cloudflare — delivers our website, checks that sign-ups and booking-page requests come from a person, and routes inbound email replies.
- PostHog (US) — product analytics. It gets your account ID and which screens and features you used. On the dashboard it also records how a page is used, with every field you type in and all text on screen hidden. It never gets your name, email, phone number, or anything about your clients. From your booking page it gets only which booking steps were reached, with no visitor profile and nothing kept in the visitor's browser.
Each of these is contractually required to use your data only to provide their service. We don't share your data with anyone else.
Text messages (SMS)
ChairCal sends text messages on behalf of the stylists who use it. If you're a client, your mobile number reached us because you entered it when you booked or joined a waitlist, you texted your stylist's ChairCal booking line first, or your stylist added it after you gave it to them directly. A phone number is optional: you can book with an email address only and receive no texts. Messages arrive from your stylist's ChairCal booking line.
Two kinds get sent. Appointment messages — confirmations, reminders, and rescheduling notices — relate to a booking you made; if you texted the line first, the replies are about what you asked and your own appointments. Opening messages — an opening after a cancellation, a waitlist match, or a nudge that you're due to rebook — are sent only if you checked the box asking to hear about openings, on the booking page or the waitlist form, or replied YES to a text from your stylist inviting you. Opening emails are sent only if you checked "Email me about openings" when you booked, chose it on the page behind an invite your stylist emailed you, or agreed to opening texts. Every one has an unsubscribe link, which ends those emails and nothing else.
Message frequency varies with how often you book; most clients get a few messages per appointment plus the occasional opening notice. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. You can also email support@chaircal.com.
If you're a stylist, ChairCal texts the mobile number you give us about your own bookings, never marketing. This is what you see beside it when you save it: Texts to this number: ChairCal texts this number when a client texts your business line or turns down a new time you offered, so you can act without opening the app. Message frequency depends on your bookings. Msg & data rates may apply. Reply STOP to opt out, HELP for help. You can also turn these texts off anytime in Studio → Account.
We do not sell or share mobile opt-in information or SMS consent with third parties or affiliates for their own marketing purposes. Phone numbers and consent records are used only to deliver the messages described above, and are disclosed only to the messaging provider that carries them for us, or to a carrier or regulator that asks us to show a text was sent with consent.
How long we keep it
As long as your account is active, we keep your data so the service works. If you cancel, your data stays until you ask us to delete it — email support@chaircal.com and we'll do it within 30 days.
When you delete your account, we keep three kinds of record after it: the consent to texts and to opening emails that you and your clients gave (the number or email address, when, and the words agreed to) and any STOP, so we can answer for a text that was sent and never text a number that said STOP; and a one-way hash of your email, mobile number and card so a free trial is used once. Everything else is deleted, or kept without names, numbers or messages, such as the dates, statuses and amounts of past bookings and texts. Your invoices and payments stay with Stripe as the billing record; your saved cards and customer record there are removed once your last invoice is paid or closed.
Your rights
Wherever you live, you have the right to:
- See what data we have about you (just ask — self-service export is coming).
- Correct anything that's wrong.
- Delete your data (we'll do it within 30 days of request).
- Take it with you (email support and we'll send you your client list and appointments).
To exercise any of these, email support@chaircal.com. Region-specific rights (e.g. California's CCPA) are covered in the "Where we operate" section above.
Your clients' rights
When a client texts STOP — or STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE, or OPTOUT — to one of your messages, we remove them from your openings list immediately and won't send them another text. Because every ChairCal business line shares one carrier sending pool, that opt-out applies across the whole platform: it stops texts from every stylist on ChairCal, not just from you. If that client also books with another stylist here, they'll stop receiving that stylist's texts too, until they text START to opt back in. Texting HELP returns your business name, our support address, and opt-out instructions. If a client emails us asking for their data to be deleted, we'll route the request to you (you're the data controller for your client list); we'll help you fulfill it. You can also delete a client yourself, in ChairCal: we keep the consent to texts and to opening emails they gave (the number or email address, when, and the words agreed to) and any STOP. Everything else about them is deleted, or kept without their name, number or messages, such as the dates, statuses and amounts of their past bookings and texts.
Cookies
We use a session cookie to keep you signed in. On the marketing site we also set a first-party session cookie on chaircal.com that holds campaign tags (source, medium, campaign, term, content) and the referring site, so a later sign-up can be attributed. That cookie has no name, email, or other personal information. PostHog, our analytics provider, keeps a first-party ID in your browser so one visit's events stay together; on a booking page it keeps nothing. We don't use third-party tracking cookies, ad pixels, or cross-site behavioral analytics.
Product analytics
We record a defined set of product events — sign-up, page-section views (dashboard, inbox, schedule, billing), and business actions (booking created, opening alert sent, client added) — and attribute them to your account when you're signed in. Marketing-page visits before signup are recorded anonymously (no account attached) so we can understand how stylists find us. Clicks on sign-up buttons and the campaign tags above go with those events; they never include a name, email, or other personal information.
We use this data to debug issues, decide what to build next, and measure whether the service is delivering its promised outcomes for stylists. We do not sell it, share it with advertisers, or use it to enrich third-party profiles. Events stay with ChairCal and PostHog (listed above) and are tied to your account ID, never to your name, email, or your clients' data. See §8 of the Terms of Service for the identical commitments on the contract side.
Data security
All data is encrypted in transit (TLS) and at rest. We follow industry-standard practices for access control and incident response. If we ever experience a breach affecting your data, we'll notify you within 72 hours.
Children
ChairCal is not intended for anyone under 18. We don't knowingly collect data from minors. If you think a minor's data is in our system by accident, email us and we'll remove it.
Changes to this policy
If we materially change this policy, we'll email you and post a notice at the top of this page. Continued use of the service after a change means you accept the new policy.
Who runs ChairCal
ChairCal is operated by Haven Rock Labs LLC, a North Carolina limited liability company doing business as ChairCal ("we," "us," or "ChairCal"). When this policy refers to ChairCal, that means Haven Rock Labs LLC — the legal entity you're dealing with.
Contact
Questions about privacy? Email support@chaircal.com.